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Top Stories 

• The Metro-North Railroad’s Hudson line train derailed while rounding a bend in the 
Bronx, New York, killing four and injuring more than 60 people December 1. - Associated 
Press (See item 5) 

• Nine empty BNSF Railway oil tanker cars derailed December 1 after being hit by a truck in 
Bismarck, North Dakota, causing a line closure that was expected to reopen by December 
2. - Associated Press (See item 9) 

• Approximately 22,500 gallons of sewage spilled December 1 into the San Diego River 
prompting the closure of Ocean Beach and South Mission Beach in California. - U-T San 
Diego (See item 16 ) 

• The University of Washington Medicine notified about 90,000 patients that their medical 
information was stolen during a malware attack October 2, which may have included 
Social Security numbers in 15,000 cases. - Seattle Times (See item 17 ) 
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Energy Sector 



1. December 2, Associated Press - (Indiana) 3 oil storage tanks burn at southwestern 
Indiana well; authorities say no one injured. Officials continue to investigate and 
suspect an electrical spark from one of the tank batteries may have caused an oil well 
with three storage tanks to explode in southwestern Indiana December 1 . Crews 
contained the water and oil runoff from the scene. 

Source: 

http://www.dailviournal.net/view/storv/e08d4fd99bld4ba8840cf01dca0d5ac9/IN— Oil- 
Tanks-Fire/#.UpyfAcSkqM5 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. December 1, Lorain Morning Journal - (Ohio) 2 hydrants out of service during 
Republic Steel fire. The Lorain Fire Department put out a fire November 30 at 
Republic Steel’s new electric arc furnace that injured five people after discovering two 
nearby hydrants were not working. The cause and extent of the damage is under 
investigation. 

Source: http://www.morningiournal.com/general-news/20131201/2-hvdrants-out-of- 
service-during-republic-steel-fire 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 



3. November 29, Lincoln Journal Star - (Nebraska) Ex-Pinnacle Bank manager fined, 
banned from banking. The former manager of Pinnacle Bank’s Madison branch in 
Nebraska was fined by the Federal Deposit Insurance Corp., for $250,000 and 
permanently banned from banking after he was accused of engaging in an improper 
loan scheme causing the bank to incur losses of about $400,000. 

Source: http://iournalstar.com/business/local/ex-pinnacle-bank-manager-fined-banned- 
from-banking/article 72378762-803a-5c7e-9664- 
74732e737760.html ‘/comment form=true 

For another story, see item 25 

[ Return to top ] 

Transportation Systems Sector 

4. December 2, Yakima Herald-Republic - (Washington) Whiteout possible over 
Snoqualmie; SR-410 to close. Four separate accidents and high winds caused falling 
trees which forced the Washington State Department of Transportation to close a part 
of Interstate 90 for over 6 hours December 1-2. A section of State Route 410 in 
Snoqualmie Pass was also closed due to severe weather. 

Source: http://www.vakimaherald.com/news/latestnews/1719417-8/i-90-reopens- 
across-snoqualmie-pass 

5. December 2, Associated Press - (New York) NTSB: 2nd data recorder found in 
derailed NY train. The Metro-North Railroad’s Hudson line train derailed while 
rounding a bend in the Bronx, killing four and injuring more than 60 people December 
1 . Officials continue to investigate the cause after finding two data recorders from the 
train. 

Source: http://www.washingtonpost.com/business/nvc-train-deraihnent-kills-4-hurts- 
more-than-60/2013/12/01/fb8e3a0e-5ae8-lle3-801f-lf90bf692c9b story.html 

6. December 2, KMOV 4 St. Louis - (Missouri) West County highway shuts down after 
multi- vehicle crash. A three-vehicle accident on Highway 100 in St. Louis County 
injured four people and closed part of the highway December 1. 

Source: http://www.kmov.com/news/local/Highwav-100-in-West-County-closed-after- 
multi-vehicle-crash-23400798 1 .html 

7. December 1, Elmhurst Patch - (Illinois) Suspicious package discovered at Elmhurst 
post office. A suspicious package found outside the Elmhurst Post Office prompted 
police to block its entrance and detour traffic for a brief period of time December 1 
while investigators determined the item posed no hazard. 

Source: http://elmhurst.patch.com/groups/police-and-fire/p/suspicious-package- 
discovered-at-elmhurst-post-office 
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8. December 1, Gwinnett Daily Post - (Georgia) Police investigate suspicious package 
at Georgia Baptist Convention HQ. A suspicious suitcase at the Georgia Baptist 
Convention headquarters in Duluth closed the Sugarloaf Parkway for more than 2 hours 
December 1 while Gwinnett police determined the package was not a threat. 

Source: http://www.gwinnettdailvpost.com/news/2013/dec/01/police-investigate- 
suspicious-package-georgia-bapt/?news 

9. December 1, Associated Press - (North Dakota) 9 empty oil tank cars derail in North 
Dakota. Nine empty BNSF Railway oil tanker cars derailed December 1 after being hit 
by a truck in Bismarck, causing a line closure that was expected to reopen by 
December 2. 

Source: http://newsok.com/article/feed/623333 

10. December 1, Associated Press - (New Mexico) 3 railroad workers killed after train 
derailment in N.M. A freight train operated by Southwest Railroad Inc., derailed in 
Grant County, New Mexico, killing three railroad employees after the train's 
locomotive plunged 40 feet down a ravine November 30. 

Source: http://news.msn.com/us/3-railroad-workers-killed-after-train-derailment-in-nm 

11. November 30, Associated Press - (Alaska) Troopers: 4 dead in southwest Alaska 
plane crash. A fatal single-engine commuter airplane crash near Saint Marys, Alaska, 
killed four people and injured six others November 30. 

Source: http://www.10news.com/news/u-s-world/troopers-4-dead-in-southwest-alaska- 
plane-crash- 1 1 3020 1 3 

12. November 30, Associated Press; KGTV 10 San Diego - (California) Fake bomb 
threats shuts down Calif, interstate. A fake bomb threat prompted the closure of both 
northbound and southbound lanes of Interstate 15 in San Diego County for about 2 
hours November 28 before authorities arrested the suspect that phoned in the threat. 
Source: http://www.recorderonline.com/news/state news/article 6ab9ded3-8d08-5eb6- 
9c2c-afd398e7b7e7.html 

13. November 29, Boston Globe - (Massachusetts) Tufts Medical Center Station closed 
due to smoke. A fire in a high-voltage electrical room caused by a smoldering 15,000- 
volt line prompted the evacuation and closure of the Tufts Medical Center Orange Line 
station in Boston November 29. 

Source: http://www.bostonglobe.com/metro/2013/ll/29/tufts-medical-center-station- 

closed-due-smoke-caused-fire-electrical-room-injuries- 

reported/96riPQLlQIr05EtdYdg9nN/storv.html 

14. November 28, Associated Press - (Arizona) Arizona Department of Transportation 
warns about fraudulent Motor Vehicle Division websites. The Arizona Department 
of Transportation issued a warning about fraudulent Motor Vehicle Division Web sites 
and phone solicitation schemes that falsely advertise Arizona State motor vehicle 
services and illegally obtain and charge credit card information for services that will 
not be fulfilled. 
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Source: 

http://www.therepublic.com/view/story/2bb29666128c4d638410dala3c0deaf7/AZ— 

Fraudulent-MVD-Websites 
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Food and Agriculture Sector 

15. November 29, U.S. Food and Drug Administration - (National) IQ Formulations 
issues a voluntary recall of HYDRA VAX dietary supplement due to possible 
undeclared ingredient. IQ Formulations of Sunrise, Florida, initiated a precautionary 
recall of its HYDRA VAX pills due to a potential undeclared inclusion of a diuretic 
ingredient. 

Source: http://www.fda.gov/Safety/Recalls/ucm377057.htm 

T Return to top i 

Water and Wastewater Systems Sector 

16. December 1, U-T San Diego - (California) Sewage spill closes beaches. 
Approximately 22,500 gallons of sewage spilled December 1 into the San Diego River 
near Interstate 15 after it was carried downstream prompting the closure of Ocean 
Beach and South Mission Beach until testing determines the water is safe. 

Source: http://www.utsandiego.com/news/2013/dec/01/sewage-spill-closes-beaches/ 
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Healthcare and Public Health Sector 

See item 17 
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Government Facilities Sector 

17. November 29, Seattle Times - (Washington) UW Medicine alerts 90,000 patients on 
stolen data. The University of Washington Medicine notified about 90,000 patients 
that their medical information was stolen during a malware attack October 2, which 
may have included the Social Security numbers in 15,000 cases. Officials spent over a 
month analyzing the activity after they discovered an employee opened an email 
attachment containing malicious software. 

Source: http://seattletimes.com/html/localnews/2022364831 uwmalwarexml.html 

18. November 29, Chippewa Herald; Milwaukee Journal Sentinel - (Wisconsin) 

Milwaukee courthouse repairs top $10M from fire. Officials are still investigating 
the cause of a July fire at the Milwaukee County Courthouse that prompted the 
buildings closure for several days and cost over $10 million in repairs. 
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Source: http://chippewa.com/dunconnect/news/state-and-regional/milwaukee- 
courthouse-repairs-top-m-from-fire/article 9037fcda-e97d-5bef-86cl- 
a542136b9be3.html 



19. November 29, WNYT 13 Albany - (Vermont) Fire forces college students into new 
housing. Students were placed in temporary dormitory housing after a 5 -alarm 
apartment fire November 28 near Benning College in Vermont prompted the 
evacuation of students while firefighters spent nearly 4 hours putting out the flames. 
Source: http://wnvt.com/article/stories/S323 1078.shtml?cat=300 
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Emergency Services Sector 

20. December 2, WSAZ 3 Huntington - (West Virginia) Temporary 911 outage for some 
in Lincoln County, W.Va. Officials in Lincoln County, West Virginia, notified some 
Armstrong Telephone Services customers that they are unable to dial 9-1-1 due to an 
unknown problem December 2. Customers were advised to dial the county’s business 
line until the issue is fixed. 

Source: http://www.wsaz.com/news/headlines/Temporarv-911-Outage-for-Some-in- 
Lincoln-County-WVa-23402497 1 .html 

21. December 2, Associated Press - (Kentucky) Police in northern Ky. searching for 
suspect who stole officer’s shotgun. Northern Kentucky police are searching for an 
individual who stole a Boone County Sheriff officer’s shotgun after taking his cruiser 
December 2 and abandoning it in Walton. 

Source: 

http://www.dailyiournal.net/view/storv/098dd7842abf4e508ffd03e74fe06b65/KY— 

Suspect-Search/#.UpyaUsSkqM5 

22. December 1, Associated Press - (New York) Brawl erupts at Rikers Island jail; 4 
guards hurt. Authorities are investigated a fight at the Rikers Island jail complex in 
New York City November 29 that left four guards and several inmates injured. 

Source: http://news.msn.com/us/brawl-erupts-at-rikers-island-iail-4-guards-hurt 

23. December 1, Roanoke Times - (Virginia) Virginia trooper, two firefighters hurt 
after cruiser hits fire truck. Two Bath County firefighters and a Virginia State trooper 
were injured November 29 after the trooper’s cruiser crashed into a Millboro Volunteer 
Fire Department truck in Warm Springs, Virginia. 

Source: http://www.officer.com/news/11254102/virginia-trooper-two-firefighters-hurt- 
after-cruiser-hits-fire-truck 
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Information Technology Sector 

24. December 2, Softpedia - (International) D-Link patches security holes in DI-524, DI- 
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524UP, DIR-100 and DIR-120 routers. D-Link released new firmware for various 
router models addressing a vulnerability that could be leveraged by hackers to gain 
control of the device after details of a vulnerability were presented in October by 
Tactical Network Solutions. 

Source: http://news.softpedia.com/news/D-Link-Patches-Securitv-Holes-in-DI-524-DI- 
524UP-DIR- 1 OO-and-DIR- 1 20-Routers-405 159. shtml 



25. December 2, Softpedia - (International) Hackers target Bitcoin Talk via 
vulnerability in AnoymousSpeech registrar. A Bitcoin talk administrator announced 
December 1 that they were targeted in a man-in-the-middle attack that leveraged a 
vulnerability in the forum’s AnonymousSpeech registrar, allowing the Web site to be 
served through CloudFlare. The attacker may have intercepted encrypted 
communications, including passwords and private messages. 

Source: http://news.softpedia.com/news/Hackers-Target-Bitcoin-Talk-via- 
Vulnerabilitv-in-AnonvmousSpeech-Registrar-405123.shtml 

26. November 30, Softpedia - (International) PayPal “Limited Account Access” emails 
used for phishing. A phishing scheme that is sending emails claiming to be issued by 
PayPal online payment service asks users for their account login details along with 
other personal information in order to gain access into their accounts. Users are led into 
a fake PayPal site that is linked in the email and used to steal their information. 

Source: http://news.softpedia.com/news/PayPal-Limited-Account-Access-Emails- 
Used-for-Phishing-404863.shtml 

27. November 29, Softpedia - (International) JPEGS leveraged for targeted attacks. 
Researchers at Trend Micro discovered that some cyberattacks rely on malicious 
crafted JPEG files to perform updates on themselves or to deploy new threats. The 
image files contain encrypted data containing configuration files and binaries. 

Source: http://news.softpedia.com/news/JPEGs-Leveraged-for-Targeted-Attacks- 
404784.shtml 



28. November 29, SC Magazine - (International) Virus takes user’s photo via webcam. 
Researchers from Webroot warned that a malware family, made to look like an anti- 
virus product, disables users’ computers and claims to have detected viruses and 
demands money to purchase the full version of the product to remove the threats. If the 
user does not respond, the program takes a picture via webcam and warns the user of 
the infection and potential theft of personal information. 

Source: http://www.scmagazineuk.com/virus-takes-users-photo-via- 
webcam/article/323028/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

29. December 2, WBIR 10 Knoxville - (Tennessee) Two separate fires displace 50 people 
in Oak Ridge. A November 30 fire at McKenzie Acres apartment complex in Oak 
Ridge, Tennessee, displaced 25 people and knocked out power for several days until 
repairs are made. 

Source: http://www.wbir.com/storv/news/local/oak-ridge-anderson/2013/12/01/25- 
people-displaced-after-oak-ridge-apartment-fire/3795633/ 

30. December 1, WEWS 5 Cleveland - (Ohio) Police: Drunken woman crashed car into 
Sandusky convenient store after purchasing soda pop. Officers arrested a woman 
after she crashed her car into the Hy-Miller convenient store in Sandusky while driving 
intoxicated December 1. 

Source: http://www.newsnet5.com/dpp/news/local news/oh erie/police-drunken- 
woman-crashed-car-into-sandusky-convenient-store-after-purchasing-pop 

31. November 30, Pocono Record - (Pennsylvania) Power is back on after brief outage 
at several East Stroudsburg stores. A number of stores in East Stroudsburg, 
including Kmart and Walmart, closed for several hours due to a power outage 
November 30. 

Source: 

http://www.poconorecord.com/apps/pbcs.dll/article?AID=/20131130/NEWS/13 113999 
5/- 1/NEWS 

32. November 30, WPVI 6 Philadelphia - (New Jersey) Multi-alarm warehouse fire in 
Burlington County. Fire crews spent several hours November 30 putting out a multi- 
alarm fire at the Christmas Tree Shops warehouse in Burlington County, New Jersey. 
Officials are investigating the cause of the fire. 

Source: http://abclocal.go.com/wpvi/story?section=news/local&id=9344454 

33. November 30, Las Vegas Sun - (Nevada) As many as 100 visiting Rio catch stomach 
bug during youth football event, organizers say. Authorities believe as many as 100 
people visiting the Rio in Las Vegas for a youth football tournament fell ill with a 
stomach virus the weekend of November 30. Officials are investigating the cause of the 
illness after 13 children and five adults were taken to area hospitals. 

Source: http://www.lasvegassun.com/news/2013/nov/29/13-children-5-adults- 
hospitalized-after-getting-si/ 
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34. November 30, KFVS 12 Cape Girardeau - (Missouri) Shooting injures 2 at Sikeston 
Eagles Club. Two people were injured after a man shot them inside the Eagle’s Club in 
Sikeston November 30. Police are still searching for the suspect. 

Source: http://www.kait8.com/storv/24101895/shooting-iniures-2-at-sikeston-eagles- 
club 



35. November 29, KSHB 41 Kansas City - (Missouri) Car slams into Gladstone 
Starbucks. Eight people were injured after a woman crashed into a Starbucks in 
Gladstone November 29 when she mistakenly reversed her car rather than drive. 
Source: http://www.kshb.com/dpp/news/local news/3-people-iniured-after-car-slams- 
into-gladstones-starbucks 

36. November 29, Charleston Post and Courier - (South Carolina) North Charleston 
police investigating night club shooting. At least two people were injured in a 
shooting at the Blue Magic Bar and Grill in north Charleston. South Carolina, when 
shots were fired as patrons were exiting the night club. Police are searching for a 
suspect and continue to investigate the incident. 

Source: http ://w w w.postandcourier .com/article/20 1311 29/PC 16/131129382 
For another story, see item 8 
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Dams Sector 



37. November 30, Wilkes-Barre Times-Leader - (Pennsylvania) DEP cites dam owner for 
unsanctioned changes. A Lehigh County woman was ordered by the U.S. Department 
of Environmental Protection to reverse the unauthorized modifications she made to a 
dam that that separates Harveys Lake from Harveys Creek that increased the spillway 
height by one foot which could create a flood risk for the entire lake and surrounding 
properties. 

Source: http://golackawanna.com/news/local-news/1022063/DEP-cites-dam-owner-for- 
unsanctioned-changes 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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